[Life] US Company Fortinet Login Credentials Suspected Leaked, Cybersecurity Administration Issues Alert
bellala 央廣5h ago
The Ministry of Digital Affairs' Cybersecurity Administration stated today (19th) through a press release that the threat intelligence platform InfoStealers revealed the FortiBleed credential leak incident on the 17th, pointing out that login credentials for over 70,000 FortiGate firewalls and SSL VPN devices produced by the US company Fortinet worldwide have been stolen and leaked by hackers. The Cybersecurity Administration has issued a security alert, and currently, there have been no reported cybersecurity intrusion incidents in Taiwan.
The Cybersecurity Administration indicated that after obtaining intelligence, they immediately notified various government agencies, competent authorities in the critical infrastructure (CI) sector, and private organizations through channels such as security alerts, TWCERT/CC, and the National Cyber Security Information Sharing and Analysis Center (N-ISAC). They requested immediate password changes, restriction of external access to the management interface, upgrading Fortinet device software to the latest version, and re-logging in administrator accounts, among other measures, to activate response mechanisms and enhance cybersecurity defense capabilities.
The Cybersecurity Administration stated that in this incident, hackers used exported device configuration files for brute-force attacks. After obtaining device accounts and passwords, they could use them to infiltrate government agencies or enterprise internal networks and conduct other malicious activities. Relevant agencies should review system logs and report any compromised situations in accordance with the "Cybersecurity Management Act." The Cybersecurity Administration will continue to track relevant threat intelligence and monitor the situation's development to take appropriate actions to mitigate the risks of the incident.
The Cybersecurity Administration explained that Fortinet, a US company, was founded in 2000 and is headquartered in Sunnyvale, California, USA. Its main products include the FortiGate series of firewalls (software and hardware) and cybersecurity protection services. (Editor: Chen Wen-wei)
Source Link: https://www.rti.org.tw/news?uid=3&pid=215508
How does this article make you feel?
0 people reacted